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Application/Control Number: 10/741,512 
Art Unit: 2139 

DETAILED ACTION 

This Office Action is in response to the application filed on 12/19/2003 
pending and have been examined. 

Claim Rejections - 35 USC §112 

Claims 1-42, 45, and 59 are rejected under 35 U.S.C. 112, second paragraph, as 
being indefinite for failing to particularly point out and distinctly claim the subject matter 
which applicant regards as the invention. 

Claims 1 and 22 are rejected under 35 U.S.C. 112, second paragraph, as being 
incomplete for omitting essential elements, such omission amounting to a gap between 
the elements. See MPEP § 2172.01 . The omitted elements are: There is only one 
access control element in figure 1 corresponding to the claim. Therefore, Claim 1 and 
22 cannot be system claims. 

Claim 2-21 dependent on claim 1 and rejected with the same reason. 
Claim 23-42 dependent on claim 22 and rejected with the same reason. 

Claim 3 recites the limitation "the times". There is insufficient antecedent basic for this 
limitation in the claim. 
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. Claims 1-63 are 
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Claim 24 recites the limitation "the report times". There is insufficient antecedent basic 
for this limitation in the claim. 

Claim 45 recites the limitation "the report times". There is insufficient antecedent basic 
for this limitation in the claim. 

Claim 3 recites "the report includes the times" where its meaning is unclear. This 
ambiguity renders claim 3 indefinite. 

Claim 17 recites "further includes times the respective user" where its meaning is 
unclear. This ambiguity renders claim 17 indefinite. 

Claim 24 recites "specifying in the report times the respective user" where its meaning 
is unclear. This ambiguity renders claim 24 indefinite. 

Claim 38 recites "further includes times the respective user" where its meaning is 
unclear. This ambiguity renders claim 38 indefinite. 

Claim 45 recites "the report times the respective user" where its meaning is unclear. 
This ambiguity renders claim 45 indefinite. 

Claim 59 recites "further includes times the respective user" where its meaning is 
unclear. This ambiguity renders claim 59 indefinite. 

Claims 23-27 recites "specifying in the report" where its meaning is unclear. This 
ambiguity renders claim 23-37 indefinite. 



Claim Rejections - 35 USC § 101 

35 U.S.C. 101 reads as follows: 
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Whoever invents or discovers any new and useful process, machine, manufacture, or composition of 
matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 
conditions and requirements of this title. 

Claims 1-42 are rejected under 35 U.S.C. 101 because the claimed invention 
is directed to non-statutory subject mater. 

Claims 1-22 

The language in claim 1 raises an issue because the claim is directed merely to 
software modules (i.e. a control unit, a reporting unit to collect information). The system 
for controlling computer access in claim 1 does not have the physical hardware 
components. There is no actual physical of component for a control unit and a report 
unit of the system. There are GUIs setting specified by an administrator and collecting 
information from a user that are not tied to an article of manufacture which would result 
in a practical application producing a concrete, useful, and tangible result to form the 
basic of statutory subject matter under 35 U.S.C. 1 01 . 

Claims 2-22 are dependent claims of claim 1 and rejected with the same reason. 

Claims 22-42 

The language in claim 22 raises an issue because the claim is directed merely to 
software modules (i.e. specifying settings... ; controlling access...; collecting information 
. . . ; compiling information ) that are not tied to an article of manufacture which would 
result in a practical application producing a concrete, useful, and tangible result to form 
the basic of statutory subject matter under 35 U.S.C. 1 01 . 
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Claims 23-42 are dependent claims of claim 22 and rejected with the same 
reason. 



Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

The factual inquiries set forth in Graham v. John Deere Co., 383 U.S. 1, 148 
USPQ 459 (1966), that are applied for establishing a background for determining 
obviousness under 35 U.S.C. 103(a) are summarized as follows: 

1 . Determining the scope and contents of the prior art. 

2. Ascertaining the differences between the prior art and the claims at issue. 

3. Resolving the level of ordinary skill in the pertinent art. 

4. Considering objective evidence present in the application indicating 
obviousness or nonobviousness. 



Claims 1-11 and 15-21 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Kimball et al. (US 2004/0034646 A1) in view of Mathew et al. 
(US 2004/0003071 A1). 

Claim 1 

Kimball teaches system for controlling computer access, comprising: 
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a control unit to control access to a computer according to settings specified by 
an administrator for at least one user of the computer [par. [0022]; lines 1-6; par. [0038], 
lines 1-4; GU1 1 14 can include one or more toolbars 1 18 which include a specific set of 
controls for user of different ages]; and 

a reporting unit to collect information on which computer applications the 
respective user is attempting to access on the computer [fig. 4A; par. [0008]; collecting 
user information through GUI], 

Kimball does not teach an information being compiled in a report regarding the • 
respective user. 

Mathew teaches the information being compiled in a report regarding the 
respective user [fig. 17; a user's information is compiling into report in a form of web 
page; par. [0068], lines 15-20; fig. 14, box 1414, box 1416, and box 1420]. 

Thus, it would have been obvious to the person of ordinary skill in the art at the 
time the invention was made to modify the system of Kimball of the invention by 
including the step of Mathew because it would give an administrator to generate reports 
containing desired information such as time signed in, instant messages, visited web 
sites, and blocked web sites [Mathew, fig. 17, par. [0068], lines 15-20; fig. 14, box 1414, 
box 1416, and box 1420]. 
Claim 2 

Mathew further teaches the system of claim 1 , wherein the report includes a duration of 
time the respective user has accessed a particular computer application [fig. 17;Tamra 
has signed in for 3 hours and 24 minutes]. 
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Claim 3 

Mathew further teaches the system of claim 1 , wherein the report includes the times the 
respective user has accessed a particular computer application [fig. 17;Tamra has 
signed in for 3 hours and 24 minutes]. 
Claim 4 

Mathew further teaches. the system of claim 1, wherein the report includes the computer 
applications the respective user is denied access to according to the settings specified 
by the administrator [fig. 17, section of Blocked Web sites that Tamra attempts to visit; 
blocked web sites is equivalent to a denied access J. 
Claim 5 

Mathew further teaches the system of claim 1 , wherein the report includes the computer 
applications to which the respective user is granted access [fig. 17, section of Web sites 
that Tamra visited; visited web site is equivalent to granted access]. 
Claim 6 

Mathew further teaches the system of claim 1 , wherein the report is in the form of a web 
page [fig. 17]. 
Claim 7 

Mathew further teaches the system of claim 6, wherein the report provides a 
mechanism for the administrator to authorize the respective user access to a particular 
application to which the respective was previously denied access [fig. 17, section of 
Blocked Web sites, third column; an administrator can select "Allow site"; fig. 16, box 
1610 and 1612; par. [0078], lines 1-5 and lines 9-12]. 
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Claim 8 

Mathew further teaches the system of claim 6, wherein the report provides a 
mechanism for the administrator to prohibit the respective user access to a particular 
application [fig. 17, section of Visited sites, third column; an administrator can select 
"Block site"; fig. 16, box 1610 and 1614; par. [0079], lines 1-10]. 
Claim 9 

Mathew further teaches the system of claim 6, wherein the report is accessible by the 
administrator from a remote location from the computer [par. [0009]; lines 6-8; par. 
[0069], line 10; a computer generates a history summary report from the stored 
information; fig. 2, database 206 and database 208]. 
Claim 10 

Mathew further teaches the system of claim 6, further comprising: a database remote 
from the computer, the database storing the report regarding the respective user [par. 
[0009]; lines 6-8; par. [0069], line 10; a summary information is stored]. 
Claim 11 

Mathew further teaches the system of claim 1 , wherein the reporting unit updates the 
report with new collected information after an occurrence of at least one particular 
computer event [fig. 5B; fig. 5C; par. [0052]; "the parental control server 204 receives 
the request resolution and update the consent database 208 with request resolution"]. 



Claim 15 

Mathew further teaches the system of claim 1 , wherein the reporting unit further 
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collects additional information on which services of a designated computer 
application the respective user is attempting to access on the computer [par. [0059]; 
collecting a data related to the request a block 910, routine 900 proceeds to block 912 
and create an entry in consent database 208; fig. 7 A, entry 714, 718, and 720; 
additional information include e-mail address requested, amount of time requested, and 
amount of time unused], 

the additional information being compiled in a report regarding the respective 
user [fig. 17; par. [0071]; a report includes email and instant messages of a user were 
exchange with other people]. 
Claim 16 

Mathew further teaches the system of claim 15, wherein the report further includes a 
duration of time the respective user has accessed a particular service of the designated 
computer application [fig. 17;Tamra has signed in for 3 hours and 24 minutes]. 
Claim 17 

Mathew further teaches the system of claim 1 5, wherein the report further includes 
times the respective user has accessed the particular service of the designated 
computer application [fig. 17;Tamra has signed in for 3 hours and 24 minutes]. 
Claim 18 

Mathew further teaches the system of claim 1 5, wherein the report includes the services 
the respective user is denied access to according to the settings specified by the . 
administrator [fig. 17, section of Blocked Web sites that Tamra attempts to visit; 
blocked web sites is equivalent to a denied access ]. 
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Claim 19 

Mathew further teaches the system of claim 15, wherein the report includes the services 
the respective user is granted access to according to the settings specified by the 
administrator [fig. 1 7, section of Web sites that Tamra visited; visited web site is 
equivalent to granted access]. 
Claim 20 

Mathew further teaches the system of claim 1 5, wherein the report provides a 
mechanism for the dministrator to authorize the respective user access to a particular 
service to which the respective user was previously denied access [fig. 17, section of 
Blocked Web sites, third column; an administrator can select "Allow site"; fig. 16, box 
1610 and 1612; par. [0078], lines 1-5 and lines 9-12]. 
Claim 21 

Mathew further teaches the system of claim 15, wherein the report provides a 
mechanism for the administrator to prohibit the respective user access to a particular 
service to which the respective user was previously granted access [fig. 17, section of 
Visited sites, third column; an administrator can select "Block site"; fig. 16, box 1610 and 
1614; par. [0079], lines 1-10]. 



Claims 12-13 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Kimball et al. (US 2004/0034646 A1 ) and Mathew et al. (US 2004/0003071 A1 ) 
in view of Rowland (US 6,405,318 B1 ). 
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Claim 12 

Kimball and Mathew teach the system as described in claim 1 1 . 

Kimball and Mathew do not teach a system wherein the particular computer 
event includes the respective user logging on the computer. 

Rowiand teaches a system wherein the particular computer event includes the 
respective user logging on the computer [col. 4, lines 30-38; a system monitors logs 
(record) all logins and logouts for the target host 21]. 

Thus, it would have been obvious to the person of ordinary skill in the art at the 
time the invention was made to modify the system of Kimball and Mathew of the 
invention by including the step of Rowland because it would be able to detect intrusion 
as they are occurring or soon after in real-time system [Rowland, fig. 17, par. [0068], 
lines 1-3] 
Claim 13 

Kimball and Mathew teach the system as described in claim 11. 

Kimball and Mathew do not teach a system wherein the particular computer 
event includes the respective user logging off the computer. 

Rowland teaches a system wherein the particular computer event includes the 
respective user logging off the computer [col. 4, lines 30-38; a system monitors logs 
(record) all logins and logouts for the target host 21] 

Thus, it would have been obvious to the person of ordinary skill in the art at the 
time the invention was made to modify the system of Kimball and Mathew of the 
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invention by including the step of Rowland because it would be able to detect intrusion 
as they are occurring or soon after in real-time system [Rowland, fig. 17, par. [0068], 
lines 1-3]. 

Claim 14 is rejected under 35 U.S.C. 103(a) as being unpatentable over 
Kimball et al. (US 2004/0034646 A1) and Mathew et al. (US 2004/0003071 A1) in 

> 

view of Terry (US 2002/0026605 A1 ). 
Claim 14 

Kimball and Mathew teach the system as described in claim 1 1 . 

Kimball and Mathew do not teach a system wherein the particular computer 
event includes the start up of the computer. 

Terry teaches a system wherein the particular computer event includes the start 
up of the computer [par. [0051], lines 1-3; ' tracking of all internal machine configuration 
profiles (start-up) in a computer unit 105 having the client application 110"]. 

Thus, it would have been obvious to the person of ordinary skill in the art at the 
time the invention was made to modify the system of Kimball and Mathew of the 
invention by including the step of Terry because it would provide the ability to report in a 
real-time environment to the monitor station and the ability to record and analyze a 
"penetration pattern" of unknown program [Terry, par. [0016] and par. [0017]]. 
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Claims 22-32 and 36-42 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Kimball et al. (US 2004/0034646 A1) in view of Mathew et al. 
(US 2004/0003071 A1). 

35 U.S.C. 112, sixth paragraph, has been invoked regarding claims 22-32 and 
36-42. The claims recite "means for" plus a function. The structures corresponding to 
the functions given within claims 22-32 and 36-42 are being interpreted by the Examiner 
as given within paragraph [0048] of the instant applications specification. 

Claim 22 

Kimball teaches a system for controlling computer access, comprising: 

a) means for specifying settings to regulate access to a computer for at least 
one user of the computer [par. [0022]; lines 1-6; par. [0038], lines 1-4; GU1 114 can 
include one or more toolbars 118 which include a specific set of controls for user of 
different ages]; 

b) means for controlling access to the computer according to the 
specified settings [par. [0038], lines 8-15; Different groupings grant different levels 
access to the Internet]; and 



Application/Control Number: 10/741 ,512 Page 14 

Art Unit: 2139 

c) means for collecting information on which computer applications the respective 
user is attempting to access on the computer [fig. 4A; par. [0008]; collecting user 
information through GUI], and 

Kimball does not teache means for compiling the information into a report of the 
respective user, the report being viewable by an administrator of the computer. 

Mathew teaches means for compiling the information into a report of the 
respective user, the report being viewable by an administrator of the computer [fig. 17; a 
user's information is compiling into report in a form of web page; par. [0068], lines 15- 
20; fig. 14, box 1414, box 1416, and box 1420]. 

Thus, it would have been obvious to the person of ordinary skill in the art at the 
time the invention was made to modify the system of Kimball of the invention by 
including the step of Mathew because it would give an administrator to generate reports 
containing desired information such as time signed in, instant messages, visited web 
sites, and blocked web sites [Mathew, fig. 17, par. [0068], lines 15-20; fig. 14, box 1414, 
box 1416, and box 1420]. 
Claim 23 

Mathew further teaches the system of claim 22, further comprising: means for specifying 
in the report a duration of time the respective user has accessed a particular computer 
application [fig. 17;Tamra has signed in for 3 hours and 24 minutes]. 
Claim 24 
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Mathew further teaches the system of claim 22, further comprising: means for specifying 
in the report times the respective user has accessed a particular computer application 
[fig. 1 7; Tamra has signed in for 3 hours and 24 minutes]. 
Claim 25 

Mathew further teaches the system of claim 22, further comprising: means for specifying 
in the report the computer applications the respective user is denied access to 
according to the settings specified by the administrator [fig. 17, section of Blocked Web 
sites that Tamra attempts to visit; blocked web sites is equivalent to a denied access ]. 
Claim 26 

Mathew further teaches the system of claim 22, further comprising: means for specifying 
in the report the computer applications the respective user is granted access to 
according to the settings specified by the administrator [fig. 17, section of Web sites that 
Tamra visited; visited web site is equivalent to granted access]. 
Claim 27 

Mathew further teaches the system of claim 22, wherein the report is in the form of a 
web page [fig. 17]. 
Claim 28 

Mathew further teaches the system of claim 27, further comprising: means for 
authorizing the respective user access to a particular application to which the respective 
user was previously denied access [fig. 17, section of Blocked Web sites, third column; 
an administrator can select "Allow site"; fig. 16, box 1610 and 1612; par. [0078], lines 1- 
5 and lines 9-12]. 
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Claim 29 

Mathew further teaches the system of claim 27, further comprising: means for 
prohibiting the respective user access to a particular application to which the respective 
user was previously granted access [fig. 17, section of Visited sites, third column; an 
administrator can select "Block site"; fig. 16, box 1610 and 1614; par. [0079], lines 1-10]. 
Claim 30 

Mathew further teaches the system of claim 27, further comprising: means for accessing 
the report from a remote location from the computer [par. [0009]; lines 6-8; par. [0069], 
line 10; a computer generates a history summary report from the stored information; fig. 
2, database 206 and database 208]. 
Cla im 31 

Mathew further teaches the system of claim 27, further comprising: means for storing 
the report of the respective user [par. [0009], lines 6-8; par. [0069], line 10; a summary 
information is stored] 
Claim 32 

Mathew teaches the system of claim 22, further comprising: means for updating the 
report with new collected information after an occurrence of at least one particular 
computer event [fig. 5B; fig. 5C; par. [0052]; "the parental control server 204 receives 
the request resolution and update the consent database 208 with request resolution"]; 
Claim 36 

Mathew teaches the system of claim 22, further comprising: 

means for collecting additional information on which services of a designated 
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computer application the respective user is attempting to access on the computer [par. 
[0059]; collecting a data related to the request a block 910, routine 900 proceeds to 
block 912 and create an entry in consent database 208; fig. 7 A, entry 714, 718, and 
720; additional information include e-mail address requested, amount of time requested, 
and amount of time unused]; 

means for compiling the additional information in a report regarding the 
respective user [fig. 17; par. [0071]; a report includes email and instant messages of a 
user were exchange with other people]. 
Claim 37 

Mathew further teaches the system of claim 36, wherein the report further includes a 
duration of time the respective user has accessed a particular service of the designated 
computer application [fig. 17;Tamra has signed in for 3 hours and 24 minutes]. 
Claim 38 

Mathew further teaches the system of claim 36, wherein the report further includes 
times the respective user has accessed the particular service of the designated 
computer application [fig. 17;Tamra has signed in for 3 hours and 24 minutes]. 
Claim 39 

Mathew further teaches the system of claim 36, wherein the report includes the services 
the respective user is denied access to according to the settings specified by the 
administrator [fig. 17, section of Blocked Web sites that Tamra attempts to visit; 
blocked web sites is equivalent to a denied access ]. 
Claim 40 
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Mathew further teaches the system of claim 36, wherein the report includes the services 
the respective user is granted access to according to the settings specified by the 
administrator [fig. 17, section of Web sites that Tamra visited; visited web site is 
equivalent to granted access]. 
Claim 41 

Mathew further teaches the system of claim 36, further comprising: means for 
authorizing the respective user to have access to a particular service to which the 
respective user was previously denied access [fig. 17, section of Blocked Web sites, 
third column; an administrator can select "Allow site"; fig. 16, box 1610 and 1612; par. 
[0078], lines 1-5 and lines 9- 1 2] 
Claim 42 

Mathew further teaches the system of claim 36, further comprising: means for 
prohibiting the respective user to have access to a particular service to which the 
respective user was previously granted access [fig. 17, section of Visited sites, third 
column; an administrator can select "Block site"; fig. 16, box 1610 and 1614; par. [0079], 
lines 1-10]. 

Claims 33-34 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Kimball et al. (US 2004/0034646 A1 ) and Mathew et al. (US 2004/0003071 A1 ) 
in view of Rowland (US 6,405,318 B1). 
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35 U.S.C. 112, sixth paragraph, has been invoked regarding claims 33-34. The 
claims recite "means for" plus a function. The structures corresponding to the functions 
given within claims 33-34 are being interpreted by the Examiner as given within 
paragraph [0048] of the instant applications specification. 

Claim 33 

Kimball and Mathew teach the system as described in claim 32. 

Kimball and Mathew do not teach a system wherein the particular computer 
event includes the respective user logging on the computer. 

Rowland teaches a system wherein the particular computer event includes the 
respective user logging on the computer [col. 4, lines 30-38; a system monitors logs 
(record) all logins and logouts for the target host 21]. 

Thus, it would have been obvious to the person of ordinary skill in the art at the 
time the invention was made to modify the system of Kimball and Mathew of the 
invention by including the step of Rowland because it would be able to detect intrusion 
as they are occurring or soon after in real-time system [Rowland, fig. 17, par. [0068], 
lines 1-3]. 
Claim 34 

Kimball and Mathew teach the system as described in claim 32. 
Kimball and Mathew do not teach a system wherein the particular computer 
event includes the respective user logging off the computer. 
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Rowland further teaches the system wherein the particular computer event 
includes the respective user logging off the computer [col. 4, lines 30-38; a system 
monitors logs (record) all logins and logouts for the target host 21]. 

Thus, it would have been obvious to the person of ordinary skill in the art at the 
time the invention was made to modify the system of Kimball and Mathew of the 
invention by including the step of Rowland because it would be able to detect intrusion 
as they are occurring or soon after in real-time system [Rowland, fig. 17, par. [0068], 
lines 1-3]. 

Claim 35 is rejected under 35 U.S.C. 103(a) as being unpatentable over 
Kimball et al. (US 2004/0034646 A1) and Mathew et al. (US 2004/0003071 A1) in 
view of Terry (US 2002/0026605 A1). 

35 U.S.C. 1 12, sixth paragraph, has been invoked regarding claim 35. The 
claims recite "means for" plus a function. The structures corresponding to the functions 
given within claim 35 is being interpreted by the Examiner as given within paragraph 
[0048] of the instant applications specification. 

Claim 35 

Kimball and Mathew teach the system as described in claim 32. 
Kimball and Mathew do not teach a system wherein the particular computer 
event includes the start up of the computer. 
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Terry teaches a system wherein the particular computer event includes the start 
up of the computer [par. [0051], lines 1-3; " tracking of all internal machine configuration 
profiles (start-up) in a computer unit 105 having the client application 110"]. 

Thus, it would have been obvious to the person of ordinary skill in the art at the 
time the invention was made to modify the system of Kimball and Mathew of the 
invention by including the step of Terry because it would provide the ability to report in a 
real-time environment to the monitor station and the ability to record and analyze a 
"penetration pattern" of unknown program [Terry, par. [0016] and par. [0017]]. 

Claims 43-64 

Claims 43-63 are essentially the same as claim 22-42 except that it sets forth the 
claimed invention as a method rather a system comprising means for function and 
rejected under the same reasons as applied above. 

Conclusion 

The prior arts made of record and not relied upon are considered pertinent to 
applicant's disclosure. 

Please see attached PTO-892. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Canh Le whose telephone number is 571-270-1380. 
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The examiner can normally be reached on Monday to Friday 7:30AM to 5:00PM other 
Friday off. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 



the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



supervisor, Ayaz Sheikh can be reached on 571-272-3795. The fax phone number for 
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